CyberSec.Space Logo
Back to CVE Browser

CVE-2021-43977

MEDIUM
6.1
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2021-11-17
Last Modified2024-11-21
Data SourcesNVD

Vulnerability Description

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS.

Affected Platforms (CPE)

📦
Smartertools

Smartermail

>= 16.0.6345 and < 100.0.7803

References & Advisories

🔗 https://csirt.divd.nl/cases/DIVD-2021-00006/
🔗 https://www.smartertools.com/smartermail/release-notes/current
🔗 https://csirt.divd.nl/cases/DIVD-2021-00006/
🔗 https://www.smartertools.com/smartermail/release-notes/current

Related Vulnerabilities

CVE-2023-481165.4

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appointment.

CVE-2023-481155.4

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when m...

CVE-2023-481145.4

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. This...

CVE-2021-322349.8

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.